Rundll32 Execution With Uncommon DLL Extension — Detection Rule

Detects the execution of rundll32 with a command line that doesn't contain a common extension

Read the full analysis on IntelFusions